Ecosystem
Debian
61,817 known vulnerabilities.
Most affected packages
linux 20,203
chromium 5,831
linux-6.12 2,889
firefox-esr 1,430
thunderbird 1,395
webkit2gtk 960
imagemagick 867
wireshark 771
wpewebkit 597
xen 487
ffmpeg 442
qemu 442
gpac 393
wordpress 354
freerdp2 319
binutils 301
openssl 296
mediawiki 285
tiff 272
apache2 270
phpmyadmin 263
vim 258
freerdp3 248
asterisk 229
curl 222
samba 204
nvidia-graphics-drivers 198
tcpdump 187
cacti 175
glibc 173
clamav 169
ghostscript 168
python-django 164
bind9 159
wolfssl 151
xorg-server 151
openjdk-17 150
nvidia-graphics-drivers-tesla-470 148
graphicsmagick 147
golang-1.19 143
3,228 results · Clear filters · Feed
-
Unscored —CVE-2013-0722 Public exploit
Stack-based buffer overflow in the scan_load_hosts function in ec_scan.c in Ettercap 0.7.5.1 and earlier might allow lo…
-
Unscored —
The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly han…
-
Unscored —CVE-2012-5667 Public exploit
Multiple integer overflows in GNU Grep before 2.11 might allow context-dependent attackers to execute arbitrary code vi…
-
Unscored —
The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver a…
-
Unscored —CVE-2012-0957 Public exploit
The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive …
-
Unscored —
tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service (daemon crash) via a crafted type_o…
-
Unscored —
The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial …
-
Unscored —
Stack-based buffer overflow in the check_file_head function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted…
-
Unscored —CVE-2012-5519 Public exploit
CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web interface administrato…
-
Unscored —CVE-2012-4552 Public exploit
Stack-based buffer overflow in the error function in ssg/ssgParser.cxx in PLIB 1.8.5 allows remote attackers to execute…
-
Unscored —CVE-2012-5470 Public exploit
libpng_plugin in VideoLAN VLC media player 2.0.3 allows remote attackers to cause a denial of service (application cras…
-
Unscored —CVE-2012-4751 Public exploit
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.15, 3.0.x befo…
-
Unscored —CVE-2009-5067 Public exploit
Directory traversal vulnerability in html2ps before 1.0b6 allows remote attackers to read arbitrary files via a .. (dot…
-
Unscored —
Unspecified vulnerability in the bazaar repository adapter in Redmine 0.9.x and 1.0.x before 1.0.5 allows remote attack…
-
Unscored —CVE-2012-1189 Public exploit
Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator (TORCS) before 1.3.…
-
Unscored —CVE-2012-3375 Public exploit
The epoll_ctl system call in fs/eventpoll.c in the Linux kernel before 3.2.24 does not properly handle ELOOP errors in …
-
Unscored —CVE-2012-3430 Public exploit
The rds_recvmsg function in net/rds/recv.c in the Linux kernel before 3.0.44 does not initialize a certain structure me…
-
Unscored —CVE-2012-0869 Public exploit
Cross-site scripting (XSS) vulnerability in fup in Frams' Fast File EXchange (F*EX, aka fex) before 20120215 allows rem…
-
Unscored —
Stack-based buffer overflow in the ast_parse_digest function in main/utils.c in Asterisk 1.8.x before 1.8.10.1 and 10.x…
-
Unscored —CVE-2012-4425 Public exploit
libgio, when used in setuid or other privileged programs in spice-gtk and possibly other products, allows local users t…
-
Unscored —CVE-2012-3524 Public exploit
libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allow…
-
Unscored —CVE-2012-4929 Public exploit
The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google Chrome, Qt, and other products, can encrypt compre…
-
Unscored —CVE-2012-4600 Public exploit
Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.14, 3.0.x befo…
-
Unscored —CVE-2011-2777 Public exploit
samples/powerbtn/powerbtn.sh in acpid (aka acpid2) 2.0.16 and earlier uses the pidof program incorrectly, which allows …
-
Unscored —CVE-2012-1586 Public exploit
mount.cifs in cifs-utils 2.6 allows local users to determine the existence of arbitrary files or directories via the fi…
-
Unscored —CVE-2012-2104 Public exploit
cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might…
-
Unscored —CVE-2012-4668 Public exploit
Cross-site scripting (XSS) vulnerability in Roundcube Webmail 0.8.1 and earlier allows remote attackers to inject arbit…
-
Unscored —CVE-2012-3508 Public exploit
Cross-site scripting (XSS) vulnerability in program/lib/washtml.php in Roundcube Webmail 0.8.0 allows remote attackers …
-
Unscored —CVE-2012-3480 Public exploit
Multiple integer overflows in the (1) strtod, (2) strtof, (3) strtold, (4) strtod_l, and other unspecified "related fun…
-
Unscored —CVE-2012-2582 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.13,…
-
Unscored —
Heap-based buffer overflow in the read function in filters/words/msword-odf/wv2/src/styles.cpp in the Microsoft import …
-
Unscored —CVE-2012-3435 Public exploit
SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, …
-
Unscored —CVE-2012-3448 Public exploit
Unspecified vulnerability in Ganglia Web before 3.5.1 allows remote attackers to execute arbitrary PHP code via unknown…
-
Unscored —CVE-2012-2760 Public exploit
mod_auth_openid before 0.7 for Apache uses world-readable permissions for /tmp/mod_auth_openid.db, which allows local u…
-
Unscored —
ISC DHCP 4.1.2 through 4.2.4 and 4.1-ESV before 4.1-ESV-R6 allows remote attackers to cause a denial of service (infini…
-
Unscored —
The VteTerminal in gnome-terminal (vte) before 0.32.2 allows remote authenticated users to cause a denial of service (l…
-
Unscored —
fits-io.c in GIMP before 2.8.1 allows remote attackers to cause a denial of service (NULL pointer dereference and appli…
-
Unscored —
Buffer overflow in the readstr_upto function in plug-ins/script-fu/tinyscheme/scheme.c in GIMP 2.6.12 and earlier, and …
-
Unscored —CVE-2011-4029 Public exploit
The LockServer function in os/utils.c in X.Org xserver before 1.11.2 allows local users to change the permissions of ar…
-
Unscored —CVE-2012-3825 Public exploit
Multiple integer overflows in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allow remote attackers to cause a de…